diff --git a/ops/docker/application/Dockerfile b/ops/docker/application/Dockerfile
index 2ecc170..7af2e85 100644
--- a/ops/docker/application/Dockerfile
+++ b/ops/docker/application/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/linuxserver/freshrss:1.26.3-ls277
+FROM ghcr.io/linuxserver/freshrss:1.26.3-ls277@sha256:956682095c65d891ef4d85736ce6dbaf562710fa1210aeb7c2415898022b4cae
 
 COPY ops/docker/application/extensions/ /config/www/freshrss/extensions
 
diff --git a/ops/docker/application/Dockerfile.original b/ops/docker/application/Dockerfile.original
index b333587..5dcaed6 100644
--- a/ops/docker/application/Dockerfile.original
+++ b/ops/docker/application/Dockerfile.original
@@ -1,4 +1,4 @@
-FROM freshrss/freshrss:edge-alpine
+FROM freshrss/freshrss:edge-alpine@sha256:57bb79cccfd62914e8c67c24987665801bfaf59e23b6a0ca67fae76c4062f53e
 
 COPY ops/docker/application/extensions/ /var/www/FreshRSS/extensions/
 
diff --git a/ops/docker/application/extensions/xExtension-Readable-master/compose.yml b/ops/docker/application/extensions/xExtension-Readable-master/compose.yml
index 9926f61..26cea2b 100644
--- a/ops/docker/application/extensions/xExtension-Readable-master/compose.yml
+++ b/ops/docker/application/extensions/xExtension-Readable-master/compose.yml
@@ -3,7 +3,7 @@ version: '3'
 services:
   
   mariadb:    
-    image: mariadb 
+    image: mariadb@sha256:b3af559fc38e013c50dd5b5993bfbbb21125c1a62d976b3b0a14d9c4acaae578 
     restart: always
     volumes:
       - /data/freshrss/maria:/var/lib/mysql
@@ -15,7 +15,7 @@ services:
 
       
   freshrss:
-    image: freshrss/freshrss:edge
+    image: freshrss/freshrss:edge@sha256:2490e9b47a4a03efba4bfc27f75eb8106e3988d61f29bf4e2e8cdcebc1f8e89a
     restart: unless-stopped
     ports:
       - 127.0.0.1:8083:80
@@ -30,15 +30,15 @@ services:
       - read:read
 
   read:
-    image: phpdockerio/readability-js-server
+    image: phpdockerio/readability-js-server@sha256:ea8354b4260098117a99dd75df5b5a36c8390c979a334cc5328016f23ff28c8e
     restart: always
 
   merc:
-    image: wangqiru/mercury-parser-api
+    image: wangqiru/mercury-parser-api@sha256:db5f7f6d3997a7697aef924494f005c1142c6f404d9eb91b8c1a95e4e6e60405
     restart: always
 
   fivefilters:
-    image: "heussd/fivefilters-full-text-rss:latest"
+    image: "heussd/fivefilters-full-text-rss:latest@sha256:4596c37e031fa9c13bfe85fb754dfdf9e67bf9e4b6c23b023dfc9b4ec54e9d47"
     environment:
       # Leave empty to disable admin section
       - FTR_ADMIN_PASSWORD=
diff --git a/ops/docker/postgres/Dockerfile b/ops/docker/postgres/Dockerfile
index c8f2f65..23dc5a6 100644
--- a/ops/docker/postgres/Dockerfile
+++ b/ops/docker/postgres/Dockerfile
@@ -1 +1 @@
-FROM postgres:17.6-alpine3.22
+FROM postgres:17.9-alpine3.22@sha256:d5914d9850b32edc53951703b334538a777f48e8ba7555a17748642433f39b63